Privacy Policy
Last updated: 7 July 2026
This Policy explains how Tengan Technology Sdn. Bhd. (“we”, “us”) collects, uses, and protects personal data when you use Jeff, our AI trading assistant on Telegram and at gmhl.io. We process personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA) and applicable law.
1. Data we collect
- Telegram identifiers — your Telegram user id and username, needed to operate the bot and identify your account.
- Messages you send Jeff — the questions and instructions you send, so Jeff can respond and maintain short conversation context.
- Wallet data — your main wallet address and the approved agent-wallet address used to place trades. We never receive your private keys or seed phrase.
- Usage & billing — credit balance and usage ledger, subscription status, and payment records. Card details are handled entirely by our third-party payment processor; we do not store card numbers.
- Feedback — anything you submit via the /feedback or /bug commands.
2. How we use it
- To provide the Service — generate analysis, place trades you approve, manage alerts and positions.
- To operate billing, credits, and subscriptions.
- To provide support and respond to feedback.
- To secure the Service, prevent abuse and fraud, and enforce our Terms.
- To improve the Service, using aggregated or de-identified usage where possible.
3. AI processing
To answer you, the messages you send Jeff are processed by third-party large-language-model providers. We send them the content needed to generate a response together with relevant market data; we do not send your private keys. Do not share information in chat that you do not want processed by these providers.
4. Third parties we share data with
We share personal data with trusted third-party service providers who help us operate the Service — including for messaging, wallet authentication, trade execution, payment processing, AI/model processing, hosting, and data storage. Each processes data only as needed to provide its service and under its own terms and privacy policy. We do not sell your personal data.
5. Data retention
We retain account, usage, and billing records for as long as your account is active and as needed to provide the Service, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Conversation context is short-lived. You may request deletion of your account data as described below.
6. Security
We use reasonable technical and organisational measures to protect personal data. Access to our systems is restricted, and sensitive credentials are held as secrets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your rights
Subject to the PDPA and applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent to certain processing. To make a request, reach us through the /feedback command in Jeff on Telegram. Note that some data must be retained to meet legal obligations, and deleting account data will end your ability to use the Service.
8. International transfers
Our providers may process and store data outside Malaysia. Where personal data is transferred across borders, we take steps to ensure it remains protected consistent with this Policy and applicable law.
9. Children
The Service is not intended for anyone under 18, and we do not knowingly collect data from minors.
10. Changes
We may update this Policy from time to time; the “Last updated” date above reflects the latest version. Material changes will be communicated through the Service.
11. Contact
For privacy questions or requests, reach Tengan Technology Sdn. Bhd. through the /feedback command in Jeff on Telegram.